CVE-2017-1200

IBM BigFix Compliance 1.7 through 1.9.91 TEMA SUAv1 SCA SCM does not validate, or incorrectly validates, a certificate.This weakness might allow an attacker to spoof a trusted entity by using a man-in-the-middle MITM attack. The software might connect to a malicious host while believing it is a...

Cross site scripting

IBM I 7.2 and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 156164...

CVE-2019-4040

IBM I 7.2 and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 156164...

CVE-2018-19440

ARM Trusted Firmware-A allows information disclosure...

CVE-2018-19440

ARM Trusted Firmware-A allows information disclosure...

CVE-2018-19440

ARM Trusted Firmware-A allows information disclosure...

Information disclosure

ARM Trusted Firmware-A allows information disclosure...

UBUNTU-CVE-2018-19440

ARM Trusted Firmware-A allows information disclosure...

CVE-2018-19440

CVE-2018-19440 affects ARM Trusted Firmware-A, with the vulnerability described as information disclosure. Public details consistently identify the affected component as ARM Trusted Firmware-A and report potential confidentiality impact, aligning with CVSS data that lists partial confidentiality ...

CVE-2018-19440

ARM Trusted Firmware-A allows information disclosure...

OpenSC CVE-2019-6502 Memory Leak Denial of Service Vulnerability

Description OpenSC is prone to a denial-of-service vulnerability. An attacker can exploit this issue to cause denial-of-service conditions. OpenSC version 0.19.0 is vulnerable; other versions may also be affected. Technologies Affected Opensc-Project Opensc 0.19.0 Recommendations Permit local...

PYSEC-2019-108

DISPUTED An issue was discovered in NumPy 1.16.0 and earlier. It uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object, as demonstrated by a numpy.load call. NOTE: third parties dispute this issue because it is a behavior...

PT-2019-1615

Name of the Vulnerable Software and Affected Versions NumPy versions 1.16.0 and earlier Description An issue was discovered in NumPy where it uses the pickle Python module unsafely. This allows remote attackers to execute arbitrary code via a crafted serialized object, as demonstrated by a...

CVE-2018-1772

IBM SPSS Analytic Server 3.1.1.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 148689...

Cross site scripting

IBM SPSS Analytic Server 3.1.1.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 148689...

CVE-2018-1772

IBM SPSS Analytic Server 3.1.1.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 148689...

Privilege Escalation

glusterfs.so is vulnerable to privilege escalation. A malicious user can authenticate through TLS using the gluster CLI with the --remote-host command to add themselves to the trusted pool and gain the same permissions...

Authorization Bypass

gnutls is vulnerable to authorization bypass attacks. The vulnerability exists as GnuTLS before 2.7.6, when the GNUTLSVERIFYALLOWX509V1CACRT flag is not enabled, treats version 1 X.509 certificates as intermediate CAs, which allows remote attackers to bypass intended restrictions by leveraging a...

Man-in-the-Middle (MitM)

Ruby is vulnerable to man-in-the-middle attack. The SSL client's hostname identity check does not properly handle certificates with hostnames containing NULL bytes. A remote attacker, who has obtained a specific certificate that is signed by an trusted CA, is able to exploit the vulnerability to...

Cross site scripting

IBM Security Identity Manager 6.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 153748...